This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft File: saGMIGd1j-jJIZgeixH6MI5iaTs.mft (raw, json) Hash identifier: lGBWwfnWd//8vvgJqtsOpg8ZRWJ6sD0YhOVkMxqTojc= Subject key identifier: 77:F3:C0:AA:E3:0A:FF:0E:D5:60:E7:E9:F0:59:12:D5:DE:B7:1C:6F Authority key identifier: B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B Certificate issuer: /CN=A91AAAF2/serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B Certificate serial: 0833 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft Manifest number: 082C Signing time: Mon 22 Dec 2025 20:10:57 +0000 Manifest this update: Mon 22 Dec 2025 20:10:56 +0000 Manifest next update: Mon 29 Dec 2025 20:10:56 +0000 Files and hashes: 1: saGMIGd1j-jJIZgeixH6MI5iaTs.crl (hash: N5y4v4UXcuDKfLE9Vjvm7WgbzWaP+Iugwnix9MfJVLs=) 2: 73D3A6E0F72011EA8776EC28C4F9AE02.roa (hash: EgzF4RdbUeBvjesKc59wR9UVO4rx0k2Sq5JHzQFu9tU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2099 (0x833) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAAF2, serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B Validity Not Before: Dec 22 20:10:56 2025 GMT Not After : Dec 29 20:10:56 2025 GMT Subject: CN=6949a5d1-d88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c8:43:14:9a:ed:58:7a:ef:8b:5f:30:bf:23: 45:f2:84:75:1a:99:d0:02:11:fa:36:0e:27:d9:ca: 3a:58:68:19:69:6f:6d:30:12:0e:48:11:d8:b9:7e: 17:32:bc:25:31:18:e3:cb:f1:f3:28:05:5c:45:62: b4:7a:c6:30:57:f3:e5:73:8a:31:a2:1d:a0:fe:5c: c8:34:c6:96:9b:dd:dc:53:16:59:ac:e9:d0:02:84: b9:cd:87:d5:e3:15:10:8a:cc:73:9a:83:46:b7:19: 7b:cf:6b:27:aa:56:81:56:bc:64:35:34:cf:57:8d: bb:df:d8:ad:15:9f:6d:4a:6d:af:42:be:03:d8:d3: 92:66:c4:59:7d:71:9b:c2:6d:0e:36:e2:d1:dd:1b: c9:e7:02:c3:ff:25:ec:ac:6d:72:09:bb:f2:7f:e8: b0:d2:db:f2:3f:ee:0d:66:a4:a7:b6:c5:98:35:d0: 2b:cc:02:44:de:e2:2e:84:a6:5b:36:a7:9c:fb:c1: da:3e:dd:36:90:fc:70:c9:04:71:e4:07:bf:cb:6f: 15:de:2b:e3:e5:fb:64:47:5d:80:0e:a9:52:b8:76: 00:b8:c7:8a:4b:16:3d:f3:1b:22:cf:55:64:2b:38: 89:3f:93:61:7e:3f:ce:e5:6b:84:d0:49:f7:5f:f5: 46:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F3:C0:AA:E3:0A:FF:0E:D5:60:E7:E9:F0:59:12:D5:DE:B7:1C:6F X509v3 Authority Key Identifier: keyid:B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:62:6e:01:26:67:60:95:57:f8:ca:9b:5e:d1:2e:24:d1:20: 33:15:c1:87:4f:64:aa:26:25:3e:f1:6b:28:a1:4f:ae:06:e5: 86:70:e9:a9:a6:e2:cb:0c:95:94:92:17:80:2e:ef:93:7b:bf: fd:ee:6b:d8:ff:ef:bf:3a:4e:2e:30:28:ef:06:ae:26:1c:77: 08:95:7b:62:ec:ae:91:be:de:d4:73:bd:1d:17:70:5a:ab:9c: 84:1c:bc:92:cd:da:49:36:2b:8d:41:fe:27:ce:e3:a9:ac:73: cf:a4:69:c8:3e:b3:e8:03:e3:e7:89:e9:d2:93:b7:05:ff:eb: 0d:4b:6f:af:f8:0a:28:5d:b4:d5:9c:34:72:39:e0:b3:d7:69: 35:9a:74:ea:28:96:22:35:8c:5a:fd:b2:61:31:13:55:d3:ba: 4a:e9:54:25:4e:16:81:1e:6a:ba:65:4b:ef:10:49:90:8b:c0: 03:9d:9c:a5:40:78:fb:61:5e:c7:da:cb:8b:fe:66:2b:f6:6f: 47:e9:8f:17:6f:63:15:8e:7e:a6:e0:32:42:4d:54:05:0b:a9: 3d:a2:b8:c4:93:b4:c2:39:3b:69:59:a5:a3:9d:29:8c:30:29: 2f:af:53:e8:97:92:43:f7:3a:83:6c:ba:ba:00:a9:8f:fa:ab: 3e:d1:b8:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFBRjIxMTAvBgNVBAUTKEIxQTE4QzIwNjc3NThGRThDOTIxOTgxRThCMTFGQTMw OEU2MjY5M0IwHhcNMjUxMjIyMjAxMDU2WhcNMjUxMjI5MjAxMDU2WjAYMRYwFAYD VQQDDA02OTQ5YTVkMS1kODhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMhDFJrtWHrvi18wvyNF8oR1GpnQAhH6Ng4n2co6WGgZaW9tMBIOSBHYuX4X MrwlMRjjy/HzKAVcRWK0esYwV/Plc4oxoh2g/lzINMaWm93cUxZZrOnQAoS5zYfV 4xUQisxzmoNGtxl7z2snqlaBVrxkNTTPV42739itFZ9tSm2vQr4D2NOSZsRZfXGb wm0ONuLR3RvJ5wLD/yXsrG1yCbvyf+iw0tvyP+4NZqSntsWYNdArzAJE3uIuhKZb Nqec+8HaPt02kPxwyQRx5Ae/y28V3ivj5ftkR12ADqlSuHYAuMeKSxY98xsiz1Vk KziJP5Nhfj/O5WuE0En3X/VGbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfzwKrj Cv8O1WDn6fBZEtXetxxvMB8GA1UdIwQYMBaAFLGhjCBndY/oySGYHosR+jCOYmk7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUFGMi84MjI2QUI3MkY3 MUUxMUVBQjY5OTQxMjNDNEY5QUUwMi9zYUdNSUdkMWotakpJWmdlaXhINk1JNWlh VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhR01JR2Qxai1qSklaZ2VpeEg2TUk1aWFUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUFGMi84MjI2QUI3MkY3MUUxMUVBQjY5OTQxMjNDNEY5QUUwMi9zYUdNSUdkMWot akpJWmdlaXhINk1JNWlhVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+Ym4BJmdglVf4ypte0S4k0SAzFcGHT2SqJiU+8WsooU+uBuWGcOmp puLLDJWUkheALu+Te7/97mvY/++/Ok4uMCjvBq4mHHcIlXti7K6Rvt7Uc70dF3Ba q5yEHLySzdpJNiuNQf4nzuOprHPPpGnIPrPoA+PnienSk7cF/+sNS2+v+AooXbTV nDRyOeCz12k1mnTqKJYiNYxa/bJhMRNV07pK6VQlThaBHmq6ZUvvEEmQi8ADnZyl QHj7YV7H2suL/mYr9m9H6Y8Xb2MVjn6m4DJCTVQFC6k9orjEk7TCOTtpWaWjnSmM MCkvr1Pol5JD9zqDbLq6AKmP+qs+0bgD -----END CERTIFICATE-----Generated at Tue Dec 23 00:05:55 2025 by rpki-client